silkroad[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

silkroad.exe
Size

740KB
MD5

9bd9a6b27e3352624cdeb7fce09d5afb
SHA1

5a518d69ec2bb80c9266efb1097c72d54bac7af2
SHA256

d544424a259d36c07eb08514c0dcea7470d960ed07eb012f1fda8ed1853a1916
SHA512

6dfd76b96f001be1da416b41505dd31b8ae95d2b08915b72046820152a70d7c3e920864488996a4fd84bc83545f1c6f52709e8dbe3851224291f70845d26c36c
SSDEEP

12288:+pdw+xEEWEXPoRtCNOD1TD39O9GSfbDArsP1UIOBbtc:+/EoP1Q9O93KsP2IOtK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
silkroad.exe

Files

silkroad.exe
.exe windows:4 windows x86

f87ecc5566c3a9a553b7c631905df4b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
GetCPInfo
GetOEMCP
FileTimeToSystemTime
WritePrivateProfileStringA
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
GetCurrentProcess
GetVolumeInformationA
GetFullPathNameA
SetErrorMode
FileTimeToLocalFileTime
RaiseException
RtlUnwind
ExitThread
CreateThread
GetSystemTimeAsFileTime
ExitProcess
HeapReAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCommandLineA
GetStartupInfoA
HeapSize
UnhandledExceptionFilter
TlsAlloc
IsDebuggerPresent
GetStringTypeA
GetStringTypeW
GetStdHandle
VirtualFree
HeapDestroy
HeapCreate
LCMapStringA
LCMapStringW
SetHandleCount
GetFileType
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
InterlockedDecrement
GetModuleFileNameW
SuspendThread
ResumeThread
SetThreadPriority
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcmpA
GlobalAlloc
FormatMessageA
LocalFree
MulDiv
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
SetLastError
lstrcmpW
InterlockedIncrement
GetDateFormatA
GetTimeFormatA
FindNextFileA
ResetEvent
GlobalMemoryStatus
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetLocalTime
QueryPerformanceFrequency
CreateIoCompletionPort
PostQueuedCompletionStatus
GetQueuedCompletionStatus
GetProcessHeap
HeapAlloc
HeapFree
lstrcatA
WinExec
lstrcpyA
GetWindowsDirectoryA
GetFileSize
CompareStringW
UnmapViewOfFile
FlushViewOfFile
CreateFileMappingA
MapViewOfFile
SleepEx
FlushInstructionCache
CompareStringA
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
GetVersion
MultiByteToWideChar
InterlockedExchange
GetDiskFreeSpaceExA
CreateDirectoryA
GetFileTime
FindClose
FindFirstFileA
DeleteFileA
lstrlenA
OutputDebugStringA
WriteFile
CreateFileA
ReadFile
FindResourceA
LoadResource
LockResource
SizeofResource
CreateMutexA
SetCurrentDirectoryA
GetFileAttributesA
GetModuleHandleA
CreateProcessA
GetLastError
GetSystemDirectoryA
CreateEventA
GetModuleFileNameA
LoadLibraryA
GetTickCount
GetCurrentProcessId
Process32First
Process32Next
OpenProcess
GetExitCodeProcess
TerminateProcess
TerminateThread
Sleep
GetProcAddress
FreeLibrary
CreateToolhelp32Snapshot
SetEvent
WaitForSingleObject
Module32First
Module32Next
CloseHandle
SetUnhandledExceptionFilter
WideCharToMultiByte

user32

RegisterClipboardFormatA
PostThreadMessageA
InvalidateRgn
IsRectEmpty
CopyAcceleratorTableA
GetSysColorBrush
DestroyMenu
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
TabbedTextOutA
SetWindowContextHelpId
MapDialogRect
GetWindowThreadProcessId
GetMessageA
TranslateMessage
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuState
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
RegisterWindowMessageA
WinHelpA
IsChild
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
GetKeyState
SetForegroundWindow
GetSubMenu
GetMenuItemID
GetMenuItemCount
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
EqualRect
DefWindowProcA
CallWindowProcA
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetWindowTextLengthA
GetWindowTextA
SetWindowPos
SetFocus
IsWindowEnabled
ShowWindow
MoveWindow
GetDlgCtrlID
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
UnregisterClassA
MessageBeep
RemovePropA
GetNextDlgGroupItem
GetDlgItem
GetWindow
OffsetRect
UnionRect
CopyRect
ScreenToClient
SetWindowLongA
RedrawWindow
GetCursorPos
PtInRect
GetWindowLongA
ReleaseCapture
IsWindow
GetFocus
SetCapture
GetCapture
KillTimer
SetTimer
LoadCursorA
LoadBitmapA
SetCursor
DrawTextA
CharNextA
CharUpperA
GetParent
SetRect
PostQuitMessage
wsprintfA
LoadIconA
IsWindowVisible
InvalidateRect
ReleaseDC
GetDC
GetClientRect
PostMessageA
SendMessageA
MessageBoxA
UpdateWindow
EnableWindow
GetMenu

gdi32

SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
OffsetViewportOrgEx
GetBkColor
GetTextColor
CreateRectRgnIndirect
GetRgnBox
GetMapMode
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
SelectClipRgn
CreateCompatibleBitmap
SetMapMode
RestoreDC
SaveDC
SetBkColor
GetClipBox
GetDeviceCaps
GetTextExtentPoint32A
CreateRectRgn
GetStockObject
GetTextMetricsA
CreateBitmap
SetBkMode
SetTextColor
StretchBlt
PatBlt
GetObjectA
CreateDIBitmap
CreateFontA
DeleteObject
BitBlt
SelectObject
CreateCompatibleDC

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
RegCloseKey
RegSetValueExA
RegQueryValueA
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA

shell32

ShellExecuteA

comctl32

_TrackMouseEvent

shlwapi

PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

oledlg

ord8

ole32

CoTaskMemAlloc
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
CoTaskMemFree
CoInitialize
CoCreateInstance
CoUninitialize
StgOpenStorageOnILockBytes
OleFlushClipboard
CoRegisterMessageFilter
CoCreateGuid

oleaut32

SysAllocString
OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
VariantClear
VariantInit
VariantChangeType
SysAllocStringLen
SysStringLen
SysFreeString
SysAllocStringByteLen

ws2_32

WSASetEvent
WSAWaitForMultipleEvents
WSASendTo
listen
WSASend
getsockopt
getpeername
accept
connect
getsockname
WSARecv
shutdown
WSASocketA
ntohs
recvfrom
htons
socket
bind
WSACreateEvent
WSACleanup
WSAStartup
inet_ntoa
gethostbyname
inet_addr
WSAGetLastError
WSAIoctl
WSARecvFrom
setsockopt
WSACloseEvent
closesocket
sendto
WSAGetOverlappedResult
WSAResetEvent

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

winmm

timeKillEvent
timeSetEvent

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 564KB - Virtual size: 562KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f87ecc5566c3a9a553b7c631905df4b3

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

ws2_32

version

winmm

iphlpapi

Sections

.text Size: 564KB - Virtual size: 562KB

.rdata Size: 128KB - Virtual size: 126KB

.data Size: 24KB - Virtual size: 364KB

.rsrc Size: 20KB - Virtual size: 16KB

.text
Size: 564KB - Virtual size: 562KB

.rdata
Size: 128KB - Virtual size: 126KB

.data
Size: 24KB - Virtual size: 364KB

.rsrc
Size: 20KB - Virtual size: 16KB